Implementing #MLS in #Android #Messages would not have been possible without the great mls-rs crate from #aws: https://github.com/awslabs/mls-rs. Thanks for making it open source!

Speaking of MLS, we also use mls-rs in #ProtonMeet (see https://proton.me/meet). It's being adopted more and more internally and I even interviewed a #Rust candidate using Meet a few days ago.

#MessagingLayerSecurity #OpenSource #privacy

GitHub - awslabs/mls-rs: An implementation of Messaging Layer Security (RFC 9420)

An implementation of Messaging Layer Security (RFC 9420) - awslabs/mls-rs

GitHub

We are excited to share our latest work on making secure messaging more decentralized!

We've developed DMLS – a new approach that brings fork resilience to the MLS protocol, solving a key challenge in distributed systems while maintaining Forward Secrecy.

This work was made possible by eQualitie, who funded it as part of the SplinterCon Breakout program.

#Cryptography #MessagingLayerSecurity #DecentralizedMessaging #Messaging #OpenSource #Security #E2EE #Encryption

https://blog.phnx.im/making-mls-more-decentralized/

Making MLS more decentralized

It’s no secret that we at Phoenix R&D are big fans of the Messaging Layer Security (MLS) protocol, having helped it to come into existence. It’s a versatile group key agreement and messaging protocol that’s used to power both asynchronous and real-time applications. MLS is relatively

Phoenix R&D
Universal Profile 3.0: GSMA verspricht endlich echte RCS-Sicherheit

Google und Apple wollen bald Ende-zu-Ende-Verschlüsselung für RCS ermöglichen. Doch dabei bleibt es nicht: Der ganze Standard soll angehoben werden.

heise online

Discovery of last week: Wire, the instant messenger headquartered in Switzerland, developed in Berlin and founded by former Skype employees, has experimental support for both Messaging Layer Security and Federation (similar to Matrix), has open source clients and server, and unlike Signal, explicitly allows selfhosting servers.

https://wire.com/

#MLS #MessagingLayerSecurity #Wire #Skype #Matrix #Signal #Federation

Wire – Collaborate without Compromise

Collaborate without compromise with Wire, the trusted platform for millions worldwide. Stay in control with end-to-end encryption that's invisible, flexible collaboration, and intuitive user interface. Join now for free and boost your productivity.

In case you missed our talk about Messaging Layer Security (MLS) at #37C3, you can re-watch it now.
👉 https://media.ccc.de/v/37c3-12064-rfc_9420_or_how_to_scale_end-to-end_encryption_with_messaging_layer_security

MLS is the first standardized and fully specified end-to-end encryption protocol. It brings substantial improvements in performance and security compared to existing protocols. We have been involved in the design and development of the MLS protocol since the very beginning.

#securemessaging #encryption #e2ee #messaginglayersecurity

RFC 9420 or how to scale end-to-end encryption with Messaging Layer Security

They call it RFC 9420, we say MLS: A new IETF standard for end-to-end encryption was published in July and brings large improvements in p...

Happy New Year 🎉
We at @phoenix_r_d ended 2023 with a splash and a talk at #37C3.

🌊 The Splash:
https://blog.phnx.im/privacy-of-push-notifications/

🍿 The Congress talk:
@raphaelrobert and Konrad presented Messaging Layer Security (MLS). The room was packed and some people couldn't attend in person – luckily the talk is now online and can be watched again.

Thank you @CCC, @c3voc_releases, and all angels for the great event!

#securemessaging #encryption #e2ee #messaginglayersecurity

https://media.ccc.de/v/37c3-12064-rfc_9420_or_how_to_scale_end-to-end_encryption_with_messaging_layer_security

On the privacy of push notifications

Push notifications are a mechanism through which applications can send and display notifications to users of smartphones. The infrastructure that drives these notifications in the background is a complex mechanism and not without privacy issues.

Phoenix R&D

We ended 2023 with a talk at #37C3. @raphaelrobert and Konrad presented the new standard for end-to-end encryption, Messaging Layer Security (MLS). The room was packed and some people couldn't attend in person – luckily the talk is now online and can be watched again.
🍿 https://media.ccc.de/v/37c3-12064-rfc_9420_or_how_to_scale_end-to-end_encryption_with_messaging_layer_security

Thank you @ccc and all helping hands for the great event!

#securemessaging #encryption #e2ee #messaginglayersecurity

RFC 9420 or how to scale end-to-end encryption with Messaging Layer Security

They call it RFC 9420, we say MLS: A new IETF standard for end-to-end encryption was published in July and brings large improvements in p...

We are very excited to be at the 37th Chaos Communication Congress in Hamburg after a long pandemic break. On day 3 (29.12., 3:45pm), @raphaelrobert and Konrad will give a talk on “RFC 9420 – or how to scale end-to-end encryption with Messaging Layer Security (MLS)"
👉 https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/12064.html

@cityroler will be buzzing through the corridors and can be reached via DECT at 4109. If you want to talk about secure messaging or E2EE, let us know!

#37c3 #messaginglayersecurity #encryption

Lecture: RFC 9420 or how to scale end-to-end encryption with Messaging Layer Security | Friday | Schedule 37th Chaos Communication Congress

Our #HKPE (RFC9180) implementation shipped by #OpenSSL has been audited, and passed with flying colors: "Auditors did not identify any directly exploitable vulnerabilities". Nice work, Stephen Farrell!

https://7asecurity.com/blog/2023/12/defo-2-openssl-hpke-pr-security-audit/

https://www.opentech.fund/security-safety-audits/defo-2-openssl-hpke-pr-security-audit/

#EncryptedClientHello #ECH #MessagingLayerSecurity #MLS,

DEfO-2 OpenSSL HPKE PR Security Audit - 7ASecurity Blog

DEfO-2: OpenSSL's ECH implementation passed a security audit by 7ASecurity, addressing privacy concerns. No exploitable vulnerabilities found, & 10 low-severity issues were fixed in the latest release.

7ASecurity Blog
The first fully merged, audited and shipped bit of code from our https://defo.ie project is Hybrid Public Key Encryption (#HKPE RFC9180), was shipped by #OpenSSL https://openssl.org/blog/blog/2023/10/18/ossl-hpke/ Its core to #EncryptedClientHello #ECH and #MessagingLayerSecurity #MLS
Developing ECH for OpenSSL (DEfO) - welcome to defo.ie